$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a39d2c3d-7011-37df-adb8-915dfb142921.roa File: a39d2c3d-7011-37df-adb8-915dfb142921.roa (raw, json) Hash identifier: JYWbyZ22ds7XTOSpV1HnCzTgWUanrQWUtsS696KLG/4= Subject key identifier: D7:50:60:78:14:7C:58:2A:71:96:AC:AA:B0:16:3F:6F:8E:B5:9A:D1 Certificate issuer: /CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Certificate serial: 010D0C9F432858486AC5998BCABB7ADD6A6B1280 Authority key identifier: 2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a39d2c3d-7011-37df-adb8-915dfb142921.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 14618 IP address blocks: 216.238.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:99:8b:ca:bb:7a:dd:6a:6b:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a561a3-0ac9-4535-922f-85de35ad8de7 Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=1d01f1ff-5d0c-491e-80cf-eadf3d8edcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:aa:9f:07:c0:13:56:a8:cf:8e:2c:6c:f3: 03:bb:7c:4d:fc:70:e7:e9:15:a1:78:54:73:03:13: 7f:95:1d:8d:a2:57:3c:07:7f:66:02:b1:f3:a0:9a: 86:d3:d1:c7:35:a1:d5:71:b5:99:24:89:cd:dd:ad: 65:ea:26:2b:c8:55:b3:97:96:e0:35:c9:e0:a6:85: 8e:1b:ec:17:70:6f:1d:65:d8:21:1b:1c:87:dc:39: 07:04:df:0d:43:d2:6b:08:fb:1c:66:b9:05:b9:12: 3f:c7:51:da:c0:a4:34:6b:e0:f4:6f:ba:28:69:49: 9f:59:e0:36:5d:4f:b8:c3:11:58:41:74:3e:82:96: 3c:a0:42:21:11:f3:df:bc:85:9c:7f:50:67:b9:a3: 36:23:ba:47:fe:d4:7c:cb:3b:7d:25:14:dc:19:b4: 5e:c5:41:2a:b4:17:d1:42:66:46:16:35:31:84:cd: 32:2f:b0:5f:78:4b:96:ac:0f:d8:d4:53:8c:84:a9: 90:c2:4b:2c:9b:46:8b:6c:24:50:f1:19:df:82:2a: 7c:d9:ba:75:62:7f:0a:27:fa:87:43:c6:a6:b0:e8: d0:d0:34:80:f5:20:18:e1:ec:ab:f5:67:6c:06:ba: a3:71:3f:7b:02:06:7f:60:e5:3b:4f:19:5a:60:e0: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:50:60:78:14:7C:58:2A:71:96:AC:AA:B0:16:3F:6F:8E:B5:9A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a39d2c3d-7011-37df-adb8-915dfb142921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl X509v3 Authority Key Identifier: keyid:2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer sbgp-ipAddrBlock: critical IPv4: 216.238.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a1:d8:2a:fe:17:c8:90:79:f3:cf:51:04:85:a2:4f:2b:06: 19:a8:b7:d3:12:10:35:8d:03:a9:c4:b7:b6:da:d6:ce:fc:90: 5e:3a:ae:c8:8a:9e:cc:12:3e:d2:ae:78:bb:cd:d4:4b:c2:1d: d6:8e:43:b5:58:4f:52:41:67:11:2f:93:da:6d:0a:10:4c:87: 4c:56:9d:fa:46:bf:dc:33:9c:8a:b8:20:98:13:7f:7f:d8:17: 30:ce:92:a2:c8:4b:a5:b5:ee:47:c7:28:94:02:0a:47:7c:c5: 6c:af:1e:76:fa:2d:0f:a6:41:ab:5c:ff:4b:6e:89:7f:c0:1f: af:33:d3:1e:c8:22:8c:55:80:6a:7c:16:32:98:21:11:84:67: b8:24:7f:17:c4:fe:e7:a4:62:1b:b9:01:4c:01:54:90:f4:d3: 0a:4b:0c:0e:42:84:8d:5b:a2:55:53:89:1d:6f:07:8d:5b:ed: 8a:a1:38:07:d8:02:46:a1:e9:96:4d:1d:52:1e:62:bb:4c:6f: 5e:0e:dc:00:2e:85:b0:25:2c:1f:09:33:c6:15:65:50:55:7e: 6e:c1:32:67:0e:6f:83:e0:73:d3:05:b8:65:69:9d:c2:80:da: 42:68:f9:59:9c:50:e0:c9:e7:68:d4:b4:f9:d6:1c:71:d4:a3: 69:50:c2:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZmLyrt63WprEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRhNTYxYTMtMGFjOS00NTM1LTkyMmYtODVkZTM1YWQ4 ZGU3MB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk MWQwMWYxZmYtNWQwYy00OTFlLTgwY2YtZWFkZjNkOGVkY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzSqnwfAE1aoz44sbPMDu3xN/HDn6RWheFRz AxN/lR2Nolc8B39mArHzoJqG09HHNaHVcbWZJInN3a1l6iYryFWzl5bgNcngpoWO G+wXcG8dZdghGxyH3DkHBN8NQ9JrCPscZrkFuRI/x1HawKQ0a+D0b7ooaUmfWeA2 XU+4wxFYQXQ+gpY8oEIhEfPfvIWcf1BnuaM2I7pH/tR8yzt9JRTcGbRexUEqtBfR QmZGFjUxhM0yL7BfeEuWrA/Y1FOMhKmQwkssm0aLbCRQ8Rnfgip82bp1Yn8KJ/qH Q8amsOjQ0DSA9SAY4eyr9WdsBrqjcT97AgZ/YOU7TxlaYOCWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdQYHgUfFgqcZasqrAWP2+OtZrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1 NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRlMzVhZDhkZTcvYTM5ZDJjM2QtNzAxMS0z N2RmLWFkYjgtOTE1ZGZiMTQyOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDRhNTYxYTMtMGFjOS00NTM1LTky MmYtODVkZTM1YWQ4ZGU3LzQ0YTU2MWEzLTBhYzktNDUzNS05MjJmLTg1ZGUzNWFk OGRlNy5jcmwwHwYDVR0jBBgwFoAULEAFU1NGceZffbcPG2/11pFYGS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NGE1NjFhMy0wYWM5LTQ1MzUtOTIyZi04NWRl MzVhZDhkZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGh2Cr+F8iQefPPUQSFok8rBhmot9MSEDWNA6nEt7ba1s78kF46rsiK nswSPtKueLvN1EvCHdaOQ7VYT1JBZxEvk9ptChBMh0xWnfpGv9wznIq4IJgTf3/Y FzDOkqLIS6W17kfHKJQCCkd8xWyvHnb6LQ+mQatc/0tuiX/AH68z0x7IIoxVgGp8 FjKYIRGEZ7gkfxfE/uekYhu5AUwBVJD00wpLDA5ChI1bolVTiR1vB41b7YqhOAfY Akah6ZZNHVIeYrtMb14O3AAuhbAlLB8JM8YVZVBVfm7BMmcOb4Pgc9MFuGVpncKA 2kJo+VmcUODJ52jUtPnWHHHUo2lQwiY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:30 2025 by rpki-client